ModSecurity Firewall log file huge

[EnriqueR]

I have enabled modsecurity system and in 1 day the modsec_audit.log file has grown to more than 700Mb. Is there any way to reduce the number of messages that this module logs?

 

[Alexey.Plotnitsky]

EnriqueR,
You should decrease ModSecurity log verbosity:

 

[tech01]

This does not seem to make a difference with log levels, modsec_audit.log grows to 700M in just an hour or so.

 

[Alexey.Plotnitsky]

Hi Matt,

Try this one:
https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#SecAuditEngine

SecAuditEngine RelevantOnly

 

[tech01]

Thanks, I had already found the RelevantOnly option among some others. Seems our issues are now resolved as well.